Make /invites/:inviteId into whitelist to avoid redirect. See #27.